Solved

buffer overrun detected! program:\??\c:\windows\system32\winlogon.exe

Posted on 2009-04-14
7
4,026 Views
Last Modified: 2012-06-22
I get the error in the title

"Buffer overrun detected!

program:\??\c:\windows\system32\winlogon.exe

A buffer overrun has been detected which ahs corrupted the program's internal state. The program cannot safely continue execution and must now be terminated."

when starting windows, just before the ordinary log in screen would appear. I have the option to click okay, and then the system reboots.

I have pulled the drive and run a full chkdsk /r, no problems found. I have run three separate virus scans with no viruses found. Visual inspection makes windows look in tact and healthy. I tried a repair install and it did not change anything. I also tried a reimage that did not change anything. I can't boot into any version of windows (safe mode, directory services repair, etc)

Anybody have any idea about this error, or how to get rid of it?
0
Comment
Question by:zoogelsnof
7 Comments
 
LVL 26

Accepted Solution

by:
souseran earned 500 total points
ID: 24143445
Did you happen to have SUPERAntiSpyware on the affected drive? Can you run HiJackThis while the drive is slaved to another, and do you find an entry for *.superantispyware\SASWINLO.dll If so, can you rename the SASWINLO.dll file and does that allow you to log on to the drive?
0
 

Author Comment

by:zoogelsnof
ID: 24143866
That worked perfectly! How did you know?
0
 

Author Closing Comment

by:zoogelsnof
ID: 31570204
Perfect!
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 
LVL 26

Expert Comment

by:souseran
ID: 24143993
Glad to help. :-)

Q. How did you know?

A. LOL. Expert secret.

It appears you're running an older version of SUPERAntiSpyware. Now that the system is working again, you may want to uninstall it. I'd recommend Revo Uninstaller in Advanced Mode and clear out all the associated Files, Folders, and Registry entries. Be sure to check manually that all the old program files are gone. You can download Revo Uninstaller here:

http://www.revouninstaller.com/download/revosetup.exe

Then install the newest version of SUPERAntiSpyware. You can download it here:

http://downloads.superantispyware.com/downloads/SUPERAntiSpyware.exe

Be sure to update the data files.

0
 

Expert Comment

by:boatcomputer
ID: 24684926
Very impressed.
Again Microsoft don't give you a clue to the real problem.
Thanks again
0
 

Expert Comment

by:blxcomputers
ID: 25715974
AWESOME!! Thank you so much. I just wanted to add a comment to say thank you, and to post a work around option.

Here is what I had to do:
The answer posted above is 100% accurate.  I did not have a different drive to slave it from, so I booted using the "ultimate boot disk" CD. I then went into a "DOS" prompt. I naviagted from there to the progra~1\supera~1 directory. I pulled a dir/p and found my file! I then used the standard renaming procedure and renamed it SASWINLO.old  rebooted the machine....bang worked like a charm. Thanks again for your assistance! You saved me HOURS!!
0
 

Expert Comment

by:SocalScout
ID: 26049207
How are you able to run all those diagnostics? I have created boot disks, run Norton Antivirus from the CD,  and I still cannot access the command prompt or anything. It just takes me back to the logon where the above error occurrs.

Thanks


0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
XP won't boot 27 134
how to Repair Windows XP 12 88
Windows 7 Share with XP 22 140
repairing Windows XP on a different partition 17 55
There are 2 things you must have in order to connect to the internet behind a router, The "Gateway IP" of the router, which is usually something like 192.168.xxx.1, I've seen routers with default values of: 192.168.0.1, 192.168.1.1, 192.168.11.1, …
Migration of Exchange mailbox can be done with the ExProfre.exe tool. But at times, when the ExProfre.exe tool migrates the Exchange Server user profile, it results in numerous synchronization problems. Synchronization error messages appear in the e…
This Micro Tutorial demonstrates using Microsoft Excel pivot tables, how to reverse engineer competitors' marketing strategies through backlinks.
With the power of JIRA, there's an unlimited number of ways you can customize it, use it and benefit from it. With that in mind, there's bound to be things that I wasn't able to cover in this course. With this summary we'll look at some places to go…

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now